Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5g3nHE4s4AyxLM1EjkjN1tzc2oMoi5Y9X4mKUgdnVT9c/0/34352e3136342e3132382e302f32322d3232203d3e20323638363136.roa
File:                     34352e3136342e3132382e302f32322d3232203d3e20323638363136.roa (raw, json)
Hash identifier:          5YYpYb/+OpAL5CmKjiZf5mJi5/s/xAw5boOEneAXoss=
Subject key identifier:   F9:3B:11:FC:9A:2A:30:E7:5F:C2:FF:F2:C5:6F:11:7F:8B:AC:76:6E
Certificate issuer:       /CN=420734A528D0DD1EA09F6BB591E3B023EDB9EDDA
Certificate serial:       065D72F1856CA7A0802CAA0291D82A9108A336A7
Authority key identifier: 42:07:34:A5:28:D0:DD:1E:A0:9F:6B:B5:91:E3:B0:23:ED:B9:ED:DA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/420734A528D0DD1EA09F6BB591E3B023EDB9EDDA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5g3nHE4s4AyxLM1EjkjN1tzc2oMoi5Y9X4mKUgdnVT9c/0/34352e3136342e3132382e302f32322d3232203d3e20323638363136.roa
Signing time:             Tue 05 Sep 2023 14:04:37 +0000
ROA not before:           Tue 05 Sep 2023 13:59:37 +0000
ROA not after:            Tue 03 Sep 2024 14:04:37 +0000
asID:                     268616
IP address blocks:        45.164.128.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:5d:72:f1:85:6c:a7:a0:80:2c:aa:02:91:d8:2a:91:08:a3:36:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=420734A528D0DD1EA09F6BB591E3B023EDB9EDDA
        Validity
            Not Before: Sep  5 13:59:37 2023 GMT
            Not After : Sep  3 14:04:37 2024 GMT
        Subject: CN=F93B11FC9A2A30E75FC2FFF2C56F117F8BAC766E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d9:0a:b9:b4:8b:3a:da:68:5f:d2:ad:6e:ae:
                    93:fa:0b:a9:8e:9a:ec:1a:be:4f:8e:44:a7:b1:71:
                    56:76:1a:de:f5:de:99:41:49:1d:2b:0c:9f:f6:70:
                    1f:e8:21:71:4e:fd:7b:35:a6:41:64:e1:26:6f:dc:
                    d8:e4:71:23:f4:ea:0b:ec:9d:27:23:18:86:c6:51:
                    ae:bc:aa:fe:9e:52:e7:fc:76:57:26:7a:79:d9:4a:
                    dd:ea:1a:6a:d1:50:67:b0:35:d2:4c:05:2c:16:84:
                    01:c8:0b:b8:1e:eb:00:7a:53:da:dd:45:3d:6f:cc:
                    86:d6:e8:cf:86:fa:58:e3:3d:8f:53:46:e2:65:c3:
                    13:9a:2e:a0:a8:5a:9e:da:81:1b:a0:12:d6:eb:54:
                    b9:d6:ee:ee:84:63:02:fb:f1:ea:fa:d6:9c:7e:12:
                    c8:6b:0a:4b:d6:99:a5:e2:c6:9a:a9:8b:a8:18:ec:
                    36:d8:0c:67:ea:f4:95:32:c3:f6:e8:0f:01:ad:63:
                    45:9d:b9:50:0d:4e:01:50:5f:12:80:e5:8d:06:43:
                    cc:b4:b3:47:2f:a3:df:6f:3d:80:80:1f:cd:a4:03:
                    e0:62:f2:b0:00:1b:16:23:da:04:3f:71:08:04:ca:
                    3b:c7:85:40:8f:0c:5b:12:5d:22:6f:18:d3:c7:8b:
                    8e:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:3B:11:FC:9A:2A:30:E7:5F:C2:FF:F2:C5:6F:11:7F:8B:AC:76:6E
            X509v3 Authority Key Identifier:
                keyid:42:07:34:A5:28:D0:DD:1E:A0:9F:6B:B5:91:E3:B0:23:ED:B9:ED:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5g3nHE4s4AyxLM1EjkjN1tzc2oMoi5Y9X4mKUgdnVT9c/0/420734A528D0DD1EA09F6BB591E3B023EDB9EDDA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/420734A528D0DD1EA09F6BB591E3B023EDB9EDDA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5g3nHE4s4AyxLM1EjkjN1tzc2oMoi5Y9X4mKUgdnVT9c/0/34352e3136342e3132382e302f32322d3232203d3e20323638363136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4f:e4:39:f0:12:5b:57:c0:1d:70:d1:9c:cf:08:b1:8f:0a:cf:
         ba:ac:35:aa:5d:cc:3a:aa:61:a5:c4:bb:0d:87:e0:ae:40:fb:
         a2:49:d6:1b:6e:42:dd:5a:d1:0b:b7:0e:3c:27:4e:9a:2a:85:
         99:85:2b:ac:24:57:25:1c:d3:b5:75:e2:1a:ce:6d:45:1d:d1:
         c3:6d:5c:a3:43:a4:cb:33:e1:ee:b6:e0:5c:80:75:e4:3d:72:
         b5:d9:ba:f6:8e:88:df:39:c4:53:99:0d:10:ee:a7:6e:d3:c5:
         a0:aa:09:de:d1:36:a1:17:89:30:06:91:15:4d:15:95:00:e1:
         a7:e0:d3:36:d2:8d:74:81:e4:6b:44:f4:e5:20:d4:46:5a:eb:
         75:de:80:83:9c:f1:b2:d3:a6:dc:a7:57:86:3c:c8:14:a7:b4:
         ca:ee:4d:1c:95:2c:75:77:1e:3f:2a:64:dc:86:c0:eb:db:85:
         9a:15:9e:c4:02:29:2e:c9:8a:a7:c2:2b:da:b3:3a:e8:c3:d4:
         d1:a3:bd:b9:20:f1:d3:a1:2f:67:66:46:a8:fc:4e:87:d2:c6:
         68:f3:67:3a:10:a3:b7:27:35:62:5b:8a:58:06:43:ef:14:b6:
         2f:36:fd:a8:d4:81:e6:24:10:9e:fb:ec:4a:3b:0e:76:e2:6b:
         a4:c6:c1:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:08 2024 by rpki-client on console-ams.rpki-client.org